Easy way to report on rman catalog?

As we know, the data in the rman catalog tables is not visible to other users, even if they have read permissions on the tables.

I was wondering if anybody has an elegant solution for the requirement for reporting on rman catalog data using a read-only user. Perhaps there is a role grant I am overlooking.

I would rather not give them the actual rman account signon. The VPC option is problematic because every database has to granted individually, and then we have to remember to grant each new database as well.

I didn't find much help in the KB articles for such an approach.